Psai
Patchstack Bug Bounty Program
11 kredili kayıt · son 12 ayda 2 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
26İzleyin | CVE-2026-27440İstismar yok | WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerabilitysaad iqbal · mycred · CWE-79 | Orta6,5 | — | %0,2 | 19 Şub 2026 |
28İzleyin | CVE-2025-63030İstismar yok | WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerabilitysaad iqbal · new user approve · CWE-352 | Yüksek7,1 | — | %0,1 | 9 Ara 2025 |
26İzleyin | CVE-2025-60098İstismar yok | WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerabilityjeff farthing · theme my login · CWE-862 | Orta6,5 | — | %0,3 | 26 Eyl 2025 |
24İzleyin | CVE-2025-39400İstismar yok | WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilitywpeverest · user registration \& membership · CWE-79 | Orta6,1 | — | %0,3 | 24 Nis 2025 |
28İzleyin | CVE-2025-31011İstismar yok | WordPress SimplyRETS Real Estate IDX plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityreichertbrothers · simplyrets real estate idx · CWE-79 | Yüksek7,1 | — | %0,2 | 15 Nis 2025 |
30İzleyin | CVE-2025-31001İstismar yok | WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerabilitytla media · gtm kit · CWE-1295 | Yüksek7,5 | — | %0,5 | 1 Nis 2025 |
17İzleyin | CVE-2025-31010İstismar yok | WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerabilityreichertbrothers · simplyrets real estate idx · CWE-352 | Orta4,3 | — | %0,2 | 28 Mar 2025 |
26İzleyin | CVE-2025-27001İstismar yok | WordPress Shipmondo – A complete shipping solution for WooCommerce plugin <= 5.0.3 - Authenticated Arbitrary WordPress Option Disclosure vulnerabilityshipmondo · shipmondo – a complete shipping solution for woocommerce · CWE-201 | Orta6,5 | — | %0,3 | 28 Mar 2025 |
23İzleyin | CVE-2025-31101İstismar yok | WordPress VaultRE Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityvault group pty ltd · vaultre contact form 7 · CWE-79 | Orta5,9 | — | %0,2 | 27 Mar 2025 |
23İzleyin | CVE-2025-31031İstismar yok | WordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityastoundify · job colors for wp job manager · CWE-79 | Orta5,9 | — | %0,2 | 27 Mar 2025 |
21İzleyin | CVE-2025-27000İstismar yok | WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerabilitygeorge pattichis · simple photo feed · CWE-862 | Orta5,4 | — | %0,3 | 25 Şub 2025 |
- CVE-2026-2744026İzleyin
WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0saad iqbal · mycred19 Şub 2026
- CVE-2025-6303028İzleyin
WordPress New User Approve plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0saad iqbal · new user approve9 Ara 2025
- CVE-2025-6009826İzleyin
WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0jeff farthing · theme my login26 Eyl 2025
- CVE-2025-3940024İzleyin
WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wpeverest · user registration \& membership24 Nis 2025
- CVE-2025-3101128İzleyin
WordPress SimplyRETS Real Estate IDX plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability
YüksekCVSS 7,1İstismar yokEPSS %0reichertbrothers · simplyrets real estate idx15 Nis 2025
- CVE-2025-3100130İzleyin
WordPress GTM Kit plugin <= 2.4.0 - Sensitive Data Exposure vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1tla media · gtm kit1 Nis 2025
- CVE-2025-3101017İzleyin
WordPress SimplyRETS Real Estate IDX plugin <= 3.0.5 - CSRF to Multiple Admin Actions vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0reichertbrothers · simplyrets real estate idx28 Mar 2025
- CVE-2025-2700126İzleyin
WordPress Shipmondo – A complete shipping solution for WooCommerce plugin <= 5.0.3 - Authenticated Arbitrary WordPress Option Disclosure vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0shipmondo · shipmondo – a complete shipping solution for woocommerce28 Mar 2025
- CVE-2025-3110123İzleyin
WordPress VaultRE Contact Form 7 plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0vault group pty ltd · vaultre contact form 727 Mar 2025
- CVE-2025-3103123İzleyin
WordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0astoundify · job colors for wp job manager27 Mar 2025
- CVE-2025-2700021İzleyin
WordPress Simple Photo Feed Plugin <= 1.4.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0george pattichis · simple photo feed25 Şub 2025